Viewing the permissions available for each role
The following table shows the permissions available for each CodeCatalyst role. Use the links to jump to the appropriate set of permissions.
| Permission | Space administrator role | Power user role | Limited access role | Project administrator role | Contributor role | Reviewer role | Read only role |
|---|---|---|---|---|---|---|---|
| Space permissions |
|||||||
|
Create space |
|
|
|
|
|
|
|
|
Edit space billing details |
|
|
|
|
|
|
|
|
Set up and enable single sign-on |
|
|
|
|
|
|
|
|
Remove single sign-on |
|
|
|
|
|
|
|
|
Enable generative AI features for a space |
|
|
|
|
|
|
|
|
Disable generative AI features for a space |
|
|
|
|
|
|
|
|
Delete space |
|
|
|
|
|
|
|
|
Add other users to the Space administrator role |
|
|
|
|
|
|
|
|
Remove other users from the Space administrator role |
|
|
|
|
|
|
|
|
Create team |
|
|
|
|
|
|
|
|
Delete team |
|
|
|
|
|
|
|
|
Update team |
|
|
|
|
|
|
|
|
Disable machine resources for the space |
|
|
|
|
|
|
|
|
Enable machine resources for the space |
|
|
|
|
|
|
|
|
Create project |
|
|
|
|
|
|
|
|
Associate an AWS account connection with the space |
|
|
|
|
|
|
|
|
Update an AWS account connection |
|
|
|
|
|
|
|
|
Disassociate an AWS account connection from the space |
|
|
|
|
|
|
|
|
Delete an AWS account connection and remove it from the space |
|
|
|
|
|
|
|
|
Enable project-restricted account connections in the space ¹ |
|
|
|
|
|
|
|
|
Disable project-restricted account connections in the space ² |
|
|
|
|
|
|
|
|
Invite others to the space |
|
|
|
|
|
|
|
|
Create VPC connection |
|
|
|
|
|
|
|
|
Edit VPC connection |
|
|
|
|
|
|
|
|
Delete VPC connection |
|
|
|
|
|
|
|
|
View logs of activity in the space |
|
|
|
|
|
|
|
|
View AWS account connections |
|
|
|
|
|
|
|
|
View incidents for CodeCatalyst |
|
|
|
|
|
|
|
|
View space |
|
|
|
|
|
|
|
|
View teams |
|
|
|
|
|
|
|
|
View VPC connections |
|
|
|
|
|
|
|
|
¹ With the Power user role, you can enable project restrictions for an account, but you can only configure access for projects where you are a member. ² With the Power user role, you can disable project restrictions for an account, but you can only configure access for projects where you are a member. |
|||||||
Extensions permissions |
Space administrator role | Power user role | Limited access role | Project administrator role | Contributor role | Reviewer role | Read only role |
|
Install extensions |
|
|
|
|
|
|
|
|
Update extensions |
|
|
|
|
|
|
|
|
Delete extensions |
|
|
|
|
|
|
|
|
Connect a GitHub account |
|
|
|
|
|
|
|
|
Disconnect a GitHub account |
|
|
|
|
|
|
|
|
Connect a Jira site |
|
|
|
|
|
|
|
|
Disconnect a Jira site |
|
|
|
|
|
|
|
|
View configuration details for installed extensions |
|
|
|
|
|
|
|
|
View extensions |
|
|
|
|
|
|
|
| Project permissions |
Space administrator role | Power user role | Limited access role | Project administrator role | Contributor role | Reviewer role | Read only role |
|
Edit project settings |
|
|
|
|
|
|
|
|
Disable machine resources for the project |
|
|
|
|
|
|
|
|
Enable machine resources for the project |
|
|
|
|
|
|
|
|
Delete project |
|
|
|
|
|
|
|
|
Invite users to a project |
|
|
|
|
|
|
|
|
Change roles of users in a project |
|
|
|
|
|
|
|
|
Remove users from a project |
|
|
|
|
|
|
|
|
Add team to a project |
|
|
|
|
|
|
|
|
Remove team from a project |
|
|
|
|
|
|
|
|
Change project role of team |
|
|
|
|
|
|
|
|
View project |
|
|
|
|
|
|
|
|
View project activity |
|
|
|
|
|
|
|
|
View teams in project |
|
|
|
|
|
|
|
|
View blueprints |
|
|
|
|
|
|
|
| Source repository permissions |
Space administrator role | Power user role | Limited access role | Project administrator role | Contributor role | Reviewer role | Read only role |
|
Create repositories |
|
|
|
|
|
|
|
|
Link repositories |
|
|
|
|
|
|
|
|
Unlink repositories |
|
|
|
|
|
|
|
|
Delete repositories |
|
|
|
|
|
|
|
|
Edit repository settings |
|
|
|
|
|
|
|
|
View repositories |
|
|
|
|
|
|
|
|
View repository settings |
|
|
|
|
|
|
|
|
Clone repositories |
|
|
|
|
|
|
|
|
Create branches |
|
|
|
|
|
|
|
|
Create branch rules |
|
|
|
|
|
|
|
|
Change default branch |
|
|
|
|
|
|
|
|
Delete branches |
|
|
|
|
|
|
|
|
Merge branches |
|
|
|
|
|
|
|
|
Update branch rules |
|
|
|
|
|
|
|
|
View branches |
|
|
|
|
|
|
|
|
View branch rules |
|
|
|
|
|
|
|
|
Create folders |
|
|
|
|
|
|
|
|
Delete folders |
|
|
|
|
|
|
|
|
Edit folders |
|
|
|
|
|
|
|
|
View folders |
|
|
|
|
|
|
|
|
Create files |
|
|
|
|
|
|
|
|
Delete files |
|
|
|
|
|
|
|
|
Edit files |
|
|
|
|
|
|
|
|
View files |
|
|
|
|
|
|
|
|
Create and push commits |
|
|
|
|
|
|
|
|
View commits |
|
|
|
|
|
|
|
|
Create pull requests |
|
|
|
|
|
|
|
|
Create approval rules for pull requests |
|
|
|
|
|
|
|
|
Override merge requirements for pull requests |
|
|
|
|
|
|
|
|
Update pull requests |
|
|
|
|
|
|
|
|
Update approval rules for pull requests |
|
|
|
|
|
|
|
|
View pull requests |
|
|
|
|
|
|
|
|
View approval rules for pull requests |
|
|
|
|
|
|
|
|
Close pull requests |
|
|
|
|
|
|
|
|
Approve pull requests |
|
|
|
|
|
|
|
|
Comment on pull requests |
|
|
|
|
|
|
|
|
Interact with Amazon Q in comments on pull requests |
|
|
|
|
|
|
|
|
Create a revision for a pull request created by Amazon Q |
|
|
|
|
|
|
|
|
Link an issue to a pull request |
|
|
|
|
|
|
|
|
Unlink an issue from a pull request |
|
|
|
|
|
|
|
| Dev Environment permissions |
Space administrator role | Power user role | Limited access role | Project administrator role | Contributor role | Reviewer role | Read only role |
|
Create your own Dev Environment |
|
|
|
|
|
|
|
|
Stop your own Dev Environment |
|
|
|
|
|
|
|
|
Stop Dev Environments created by other users |
|
|
|
|
|
|
|
|
Resume your own Dev Environment |
|
|
|
|
|
|
|
|
View your own Dev Environments |
|
|
|
|
|
|
|
|
View Dev Environments created by other users |
|
|
|
|
|
|
|
|
Edit your own Dev Environment |
|
|
|
|
|
|
|
|
Edit Dev Environments created by other users |
|
|
|
|
|
|
|
|
Delete your own Dev Environment |
|
|
|
|
|
|
|
|
Delete Dev Environments created by other users |
|
|
|
|
|
|
|
|
Create a devfile for Dev Environments |
|
|
|
|
|
|
|
|
Edit a devfile for Dev Environments |
|
|
|
|
|
|
|
|
Delete a devfile for Dev Environments |
|
|
|
|
|
|
|
|
View a devfile for Dev Environments |
|
|
|
|
|
|
|
| Package repository and package permissions |
Space administrator role | Power user role | Limited access role | Project administrator role | Contributor role | Reviewer role | Read only role |
|
Create package repository |
|
|
|
|
|
|
|
|
View package repositories |
|
|
|
|
|
|
|
|
Edit package repository |
|
|
|
|
|
|
|
|
Delete package repository |
|
|
|
|
|
|
|
|
Create gateway package repository |
|
|
|
|
|
|
|
|
View gateway package repositories |
|
|
|
|
|
|
|
|
Delete gateway package repository |
|
|
|
|
|
|
|
|
Add upstream package repository |
|
|
|
|
|
|
|
|
Edit search order of upstream repositories |
|
|
|
|
|
|
|
|
Remove upstream package repository |
|
|
|
|
|
|
|
|
Connect to a package repository |
|
|
|
|
|
|
|
|
Read packages from a package repository |
|
|
|
|
|
|
|
|
Publish packages to a package repository |
|
|
|
|
|
|
|
|
Read and retain packages from an upstream repository |
|
|
|
|
|
|
|
|
View packages |
|
|
|
|
|
|
|
|
View package versions |
|
|
|
|
|
|
|
|
View package version assets |
|
|
|
|
|
|
|
|
List package version dependencies |
|
|
|
|
|
|
|
|
Update package version status |
|
|
|
|
|
|
|
|
Update package origin configuration |
|
|
|
|
|
|
|
|
Delete package version |
|
|
|
|
|
|
|
| Workflow permissions |
Space administrator role | Power user role | Limited access role | Project administrator role | Contributor role | Reviewer role | Read only role |
|
Create workflow |
|
|
|
|
|
|
|
|
Update workflow |
|
|
|
|
|
|
|
|
Delete workflow |
|
|
|
|
|
|
|
|
Start workflow |
|
|
|
|
|
|
|
|
Stop workflow |
|
|
|
|
|
|
|
|
Create workflow secrets |
|
|
|
|
|
|
|
|
Update workflow secrets |
|
|
|
|
|
|
|
|
Delete workflow secrets |
|
|
|
|
|
|
|
|
Create environments |
|
|
|
|
|
|
|
|
Delete environments |
|
|
|
|
|
|
|
|
Create fleet |
|
|
|
|
|
|
|
|
Update fleet |
|
|
|
|
|
|
|
|
Delete fleet |
|
|
|
|
|
|
|
|
Manage workflow resources in other accounts |
|
|
|
|
|
|
|
|
Associate an AWS account connection with an environment |
|
|
|
|
|
|
|
|
Associate a default IAM role with an environment |
|
|
|
|
|
|
|
|
Associate a VPC connection with an environment |
|
|
|
|
|
|
|
|
Disassociate a VPC connection with an environment |
|
|
|
|
|
|
|
|
Associate a VPC-connected environment with a workflow |
|
|
|
|
|
|
|
|
Disassociate a VPC-connected environment with a workflow |
|
|
|
|
|
|
|
|
Approve workflow runs |
|
|
|
|
|
|
|
|
Track a commit in a workflow |
|
|
|
|
|
|
|
|
View environments |
|
|
|
|
|
|
|
|
View build action logs |
|
|
|
|
|
|
|
|
View fleets |
|
|
|
|
|
|
|
|
View test action logs |
|
|
|
|
|
|
|
|
View workflow |
|
|
|
|
|
|
|
|
View workflow runs |
|
|
|
|
|
|
|
|
View workflow run results |
|
|
|
|
|
|
|
|
View workflow secrets |
|
|
|
|
|
|
|
| Issues permissions |
Space administrator role | Power user role | Limited access role | Project administrator role | Contributor role | Reviewer role | Read only role |
|
Create issue |
|
|
|
|
|
|
|
|
Update issue |
|
|
|
|
|
|
|
|
View issues |
|
|
|
|
|
|
|
|
Create task |
|
|
|
|
|
|
|
|
Update task |
|
|
|
|
|
|
|
|
View tasks |
|
|
|
|
|
|
|
|
Archive an issue |
|
|
|
|
|
|
|
|
Assign an issue to Amazon Q |
|
|
|
|
|
|
|
|
Interact with Amazon Q in comments on an issue |
|
|
|
|
|
|
|
|
Unassign Amazon Q from an issue |
|
|
|
|
|
|
|
|
Recommend tasks for an issue with Amazon Q |
|
|
|
|
|
|
|
|
Create tasks recommended by Amazon Q |
|
|
|
|
|
|
|
|
Update issues created by other users |
|
|
|
|
|
|
|
|
View comments on an issue |
|
|
|
|
|
|
|
|
Create a comment on an issue |
|
|
|
|
|
|
|
|
Update a comment on an issue |
|
|
|
|
|
|
|
|
Create a label |
|
|
|
|
|
|
|
|
Update a label |
|
|
|
|
|
|
|
|
View labels |
|
|
|
|
|
|
|
|
Add a label to an issue |
|
|
|
|
|
|
|
|
Remove a label from an issue |
|
|
|
|
|
|
|
|
Create a custom status for issues |
|
|
|
|
|
|
|
|
Update a custom status |
|
|
|
|
|
|
|
|
View a custom status |
|
|
|
|
|
|
|
|
Move a custom status |
|
|
|
|
|
|
|
|
Deactivate a custom status |
|
|
|
|
|
|
|
|
Add an attachment to an issue |
|
|
|
|
|
|
|
|
View an issue attachment |
|
|
|
|
|
|
|
|
Remove an attachment from an issue |
|
|
|
|
|
|
|
|
Link an issue to another issue |
|
|
|
|
|
|
|
|
Unlink an issue from another issue |
|
|
|
|
|
|
|
|
Update an issue link |
|
|
|
|
|
|
|
|
View links for an issue |
|
|
|
|
|
|
|
|
Link a pull request to an issue |
|
|
|
|
|
|
|
|
Unlink a pull request from an issue |
|
|
|
|
|
|
|
|
Link a Jira project |
|
|
|
|
|
|
|
|
Unlink a Jira project |
|
|
|
|
|
|
|
| Blueprint permissions |
Space administrator role | Power user role | Limited access role | Project administrator role | Contributor role | Reviewer role | Read only role |
|
Create custom blueprint project |
|
|
|
|
|
|
|
|
Publish a preview custom blueprint |
|
|
|
|
|
|
|
|
Publish a custom blueprint |
|
|
|
|
|
|
|
|
Add a custom blueprint to a space blueprints catalog |
|
|
|
|
|
|
|
|
Remove a custom blueprint from a space blueprints catalog |
|
|
|
|
|
|
|
|
Manage the publishing permissions for a custom blueprint |
|
|
|
|
|
|
|
|
Manage the catalog version for a custom blueprint |
|
|
|
|
|
|
|
|
Update a custom blueprint |
|
|
|
|
|
|
|
|
Delete a custom blueprint version |
|
|
|
|
|
|
|
|
Delete a custom blueprint |
|
|
|
|
|
|
|
|
Convert a source repository to a custom blueprint |
|
|
|
|
|
|
|
|
Add a custom blueprint to a project |
|
|
|
|
|
|
|
|
Disassociate a custom blueprint from a project |
|
|
|
|
|
|
|
|
Update the version of an applied custom blueprint |
|
|
|
|
|
|
|
|
Edit the settings of a custom blueprint |
|
|
|
|
|
|
|
|
View published custom blueprints |
|
|
|
|
|
|
|
| Notifications permissions |
Space administrator role | Power user role | Limited access role | Project administrator role | Contributor role | Reviewer role | Read only role |
|
Configure notification channel |
|
|
|
|
|
|
|
|
Remove notification channel |
|
|
|
|
|
|
|
|
Edit notification settings |
|
|
|
|
|
|
|
|
View notification settings |
|
|
|
|
|
|
|
|
Automatically receive notifications about CodeCatalyst incidents |
|
|
|
|
|
|
|
|
Configure email notifications for your associated email account |
|
|
|
|
|
|
|
| Search permissions |
Space administrator role | Power user role | Limited access role | Project administrator role | Contributor role | Reviewer role | Read only role |
|
Search inside a project |
|
|
|
|
|
|
|
|
Search across the space |
|
|
|
|
|
|
|
